last executing test programs: 3m1.90348097s ago: executing program 2 (id=3): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x2882026, 0x0, 0x1, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 3m1.548137726s ago: executing program 2 (id=6): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r0, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) 3m0.691196563s ago: executing program 2 (id=13): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 3m0.084764375s ago: executing program 32 (id=13): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x2) 2.945872813s ago: executing program 1 (id=1314): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c56, &(0x7f0000001040)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_winnt}, {@uni_xlateno}, {@shortname_lower}, {@utf8}, {@rodir}, {@utf8no}]}, 0xc1, 0x2a2, &(0x7f00000011c0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknod(&(0x7f0000000100)='./file1\x00', 0x1, 0x0) 2.672713598s ago: executing program 1 (id=1315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.418438253s ago: executing program 1 (id=1320): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_pidfd_open(0x0, 0x0) 2.210188367s ago: executing program 3 (id=1323): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) 2.0641367s ago: executing program 3 (id=1325): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x80802, 0x1cc) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) readv(r0, &(0x7f0000000b00)=[{&(0x7f00000001c0)=""/126, 0x7e}, {0x0}], 0x2) 1.656212518s ago: executing program 3 (id=1329): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000001680)=""/4104, 0x1008}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000040)=""/66, 0x42}], 0x4}}], 0x1, 0x40030002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 1.430883402s ago: executing program 0 (id=1330): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000208c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) write$binfmt_elf64(r1, 0x0, 0xfffffd88) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) 1.414884243s ago: executing program 3 (id=1331): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x0, &(0x7f0000000540), 0x1, 0x7a1, &(0x7f0000000f80)="$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") ftruncate(0xffffffffffffffff, 0xf4ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000880)={0x0, 0x2904c, 0x5, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x4, 0x9, 0xa}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) 1.192048027s ago: executing program 4 (id=1332): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) 1.101930278s ago: executing program 1 (id=1333): set_mempolicy(0x3, &(0x7f0000000040)=0x800000ffe, 0x5) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1) 923.258492ms ago: executing program 0 (id=1334): connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000040), 0x0, 0x8000}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 900.770632ms ago: executing program 4 (id=1335): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r0, 0x402, 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r1, &(0x7f0000000100)=""/79, 0x47) 894.194022ms ago: executing program 1 (id=1336): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@errors_continue}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@noload}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103c42, 0x11) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x400, 0x2}) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 831.333724ms ago: executing program 3 (id=1337): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, r0, 0x1, 0xfffffffd, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x43}]}, 0x34}}, 0x402) 773.510205ms ago: executing program 0 (id=1338): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) 741.733176ms ago: executing program 4 (id=1339): unshare(0x2040400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 578.630149ms ago: executing program 0 (id=1340): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'ip6gre0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @mcast1, @loopback, 0x40, 0x7800, 0xfffffffc}}) 479.35876ms ago: executing program 4 (id=1341): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x11, 0x148, 0xd8, 0x0, 0x1b0, 0x2a8, 0x2a8, 0x1b0, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff, 'pim6reg1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x4, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x1, 0x8001, '\x00', 'syz1\x00', {0x288}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0xffffffff, 0xffffff00, 'nr0\x00', 'macsec0\x00', {}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) 439.435471ms ago: executing program 0 (id=1342): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, 0x0) 398.684202ms ago: executing program 3 (id=1343): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 218.858376ms ago: executing program 4 (id=1344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}]}, 0x2c}, 0x1, 0x1000000, 0x0, 0x24008400}, 0x4004a040) 146.517667ms ago: executing program 0 (id=1345): syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1810002, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRESOCT=0x0, @ANYRES8, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRES8=0x0, @ANYRES16], 0x1, 0x1d4, &(0x7f0000000540)="$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") chdir(&(0x7f0000000f40)='./file0\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) 55.317778ms ago: executing program 1 (id=1346): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendto$inet6(r0, &(0x7f00000004c0)='s', 0x1, 0x800, 0x0, 0x0) 0s ago: executing program 4 (id=1347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010004000000000000003f00000008000300", @ANYRES32=r2, @ANYBLOB="1c005e8008000700d20000000800060001000080080005001dc3"], 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x0) kernel console output (not intermixed with test programs): [ T3379] usb 4-1: config 0 descriptor?? [ 150.205919][ T3379] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 150.215096][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 150.279117][ T5820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 150.299469][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.487285][ T5820] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 150.506587][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.542033][ T5820] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 150.557944][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.576648][ T5820] usb 5-1: Product: syz [ 150.585993][ T5820] usb 5-1: Manufacturer: syz [ 150.596674][ T5820] usb 5-1: SerialNumber: syz [ 150.610230][ T3379] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 150.621545][ T5820] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input12 [ 150.828670][ T5126] bcm5974 5-1:1.0: could not read from device [ 150.834892][ T3379] gspca_cpia1: usb_control_msg 01, error -32 [ 150.848833][ T3379] gspca_cpia1: usb_control_msg 01, error -71 [ 150.855874][ T3379] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 150.870609][ T3379] usb 4-1: USB disconnect, device number 10 [ 150.919826][ T5126] bcm5974 5-1:1.0: could not read from device [ 150.946463][ T7249] netlink: 43 bytes leftover after parsing attributes in process `syz.1.386'. [ 150.951396][ T5820] bcm5974 5-1:1.0: could not read from device [ 150.984158][ T5126] bcm5974 5-1:1.0: could not read from device [ 151.002921][ T5820] input: failed to attach handler mousedev to device input12, error: -5 [ 151.018783][ T5126] bcm5974 5-1:1.0: could not read from device [ 151.036319][ T5820] usb 5-1: USB disconnect, device number 3 [ 151.044655][ T5126] bcm5974 5-1:1.0: could not read from device [ 151.901649][ T7254] loop0: detected capacity change from 0 to 32768 [ 152.012988][ T7254] JBD2: Ignoring recovery information on journal [ 152.141218][ T7254] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 152.221274][ T3455] (kworker/u4:9,3455,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 152.302397][ T7271] sctp: [Deprecated]: syz.3.396 (pid 7271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.302397][ T7271] Use struct sctp_sack_info instead [ 152.442639][ T28] audit: type=1800 audit(1779543731.909:15): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.388" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=17058 res=0 errno=0 [ 152.484581][ C0] vkms_vblank_simulate: vblank timer overrun [ 152.514148][ T7275] (syz.0.388,7275,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: directory entry overrun - offset=16, inode=66, rec_len=22056, name_len=67 [ 152.579744][ T7277] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 152.603134][ T7277] pim6reg0: linktype set to 1 [ 152.620433][ T7275] (syz.0.388,7275,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 152.647344][ T7264] loop4: detected capacity change from 0 to 32768 [ 152.653215][ T7275] (syz.0.388,7275,1):__ocfs2_prepare_orphan_dir:2171 ERROR: status = -2 [ 152.675106][ T7275] (syz.0.388,7275,1):ocfs2_prepare_orphan_dir:2213 ERROR: status = -2 [ 152.692904][ T7275] (syz.0.388,7275,1):ocfs2_prepare_orphan_dir:2229 ERROR: status = -2 [ 152.713161][ T7275] (syz.0.388,7275,1):ocfs2_rename:1466 ERROR: status = -2 [ 152.742943][ T7275] (syz.0.388,7275,1):ocfs2_rename:1690 ERROR: status = -2 [ 152.781785][ T7254] syz.0.388 (7254) used greatest stack depth: 17712 bytes left [ 152.875388][ T7281] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 152.917683][ T7283] loop1: detected capacity change from 0 to 256 [ 152.963177][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 153.007346][ T28] audit: type=1800 audit(1779543732.479:16): pid=7283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.400" name="file2" dev="loop1" ino=1048625 res=0 errno=0 [ 153.095748][ T7283] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 153.107701][ T7283] FAT-fs (loop1): Filesystem has been set read-only [ 153.124743][ T7283] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 153.972292][ T7289] loop1: detected capacity change from 0 to 40427 [ 153.992679][ T7304] loop4: detected capacity change from 0 to 256 [ 154.002912][ T7289] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 154.010780][ T7289] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.050178][ T7289] F2FS-fs (loop1): invalid crc value [ 154.073159][ T7289] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.188812][ T7289] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.220655][ T7289] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.314944][ T7312] loop3: detected capacity change from 0 to 256 [ 154.344069][ T7312] exfat: Deprecated parameter 'namecase' [ 154.411665][ T7312] exfat: Deprecated parameter 'namecase' [ 154.460450][ T7312] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 154.694420][ T7316] loop4: detected capacity change from 0 to 8192 [ 156.613205][ T5820] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.815062][ T5820] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 156.826864][ T5820] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.852104][ T5820] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.885795][ T5820] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.926184][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.944689][ T5820] usb 2-1: Product: syz [ 156.956750][ T5820] usb 2-1: Manufacturer: syz [ 156.961410][ T5820] usb 2-1: SerialNumber: syz [ 156.997461][ T5820] usb 2-1: config 0 descriptor?? [ 157.011980][ T5820] hub 2-1:0.0: bad descriptor, ignoring hub [ 157.043127][ T5820] hub: probe of 2-1:0.0 failed with error -5 [ 157.074480][ T5820] usb 2-1: selecting invalid altsetting 0 [ 157.186110][ T7356] loop4: detected capacity change from 0 to 32768 [ 157.198375][ T7356] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.433 (7356) [ 157.239399][ T7356] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 157.292948][ T7356] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 157.318927][ T7356] BTRFS info (device loop4): using free space tree [ 157.441842][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.441'. [ 157.475396][ T7356] BTRFS info (device loop4): enabling ssd optimizations [ 157.492391][ T7356] BTRFS info (device loop4): auto enabling async discard [ 157.720170][ T5901] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 157.733085][ T7352] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 157.948470][ T7352] usb 2-1: device firmware changed [ 157.961652][ T786] usb 2-1: USB disconnect, device number 6 [ 158.038624][ T5784] block nbd0: Receive control failed (result -32) [ 158.212829][ T786] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.349310][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.448'. [ 158.365593][ T7406] netlink: 52 bytes leftover after parsing attributes in process `syz.4.448'. [ 158.428913][ T786] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 158.443241][ T786] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.470994][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 158.492220][ T786] usb 2-1: language id specifier not provided by device, defaulting to English [ 158.540660][ T786] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.571779][ T786] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.613107][ T786] usb 2-1: Product: syz [ 158.634690][ T786] usb 2-1: config 0 descriptor?? [ 158.662648][ T786] hub 2-1:0.0: bad descriptor, ignoring hub [ 158.693627][ T786] hub: probe of 2-1:0.0 failed with error -5 [ 158.724406][ T786] usb 2-1: selecting invalid altsetting 0 [ 158.786807][ T5413] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.988770][ T5413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.002193][ T28] audit: type=1326 audit(1779543738.469:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.049543][ T5413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.083563][ T5413] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 159.103206][ T28] audit: type=1326 audit(1779543738.469:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.137802][ T5413] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 159.158503][ T5413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.173693][ T28] audit: type=1326 audit(1779543738.509:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.197758][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.224070][ T5413] usb 1-1: config 0 descriptor?? [ 159.245813][ T5817] usb 2-1: USB disconnect, device number 7 [ 159.335116][ T28] audit: type=1326 audit(1779543738.509:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.412292][ T28] audit: type=1326 audit(1779543738.509:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.476093][ T28] audit: type=1326 audit(1779543738.509:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.499987][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.559953][ T28] audit: type=1326 audit(1779543738.519:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.583796][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.606622][ T28] audit: type=1326 audit(1779543738.519:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.630469][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.648519][ T7423] loop4: detected capacity change from 0 to 256 [ 159.670348][ T5413] kovaplus 0003:1E7D:2D50.0005: item fetching failed at offset 4/5 [ 159.713100][ T28] audit: type=1326 audit(1779543738.529:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.743605][ T5413] kovaplus 0003:1E7D:2D50.0005: parse failed [ 159.749924][ T5413] kovaplus: probe of 0003:1E7D:2D50.0005 failed with error -22 [ 159.789216][ T28] audit: type=1326 audit(1779543738.529:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7416 comm="syz.4.453" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd399d9ce59 code=0x7ffc0000 [ 159.813198][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.917178][ T5820] usb 1-1: USB disconnect, device number 9 [ 159.965458][ T7427] tap0: tun_chr_ioctl cmd 2148553947 [ 160.003821][ T5853] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 160.132183][ T7429] loop1: detected capacity change from 0 to 256 [ 160.156709][ T7429] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.203040][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 160.218736][ T5853] usb 5-1: unable to get BOS descriptor or descriptor too short [ 160.238484][ T5853] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 160.252828][ T5853] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 160.281046][ T5853] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 160.300514][ T5853] usb 5-1: config 128 has no interface number 0 [ 160.315651][ T5853] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 160.340234][ T7432] netlink: 'syz.1.461': attribute type 2 has an invalid length. [ 160.348718][ T5853] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.359764][ T7432] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.461'. [ 160.380575][ T5853] usb 5-1: config 128 interface 127 has no altsetting 0 [ 160.400020][ T5853] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 160.429743][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.451200][ T5853] usb 5-1: Product: syz [ 160.463921][ T5853] usb 5-1: Manufacturer: syz [ 160.468590][ T5853] usb 5-1: SerialNumber: syz [ 160.643393][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 160.789598][ T5853] usb 5-1: USB disconnect, device number 4 [ 160.843377][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.014591][ T5817] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.205767][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 161.217296][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24844, setting to 1024 [ 161.230006][ T5817] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 161.244069][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.261693][ T5817] usb 2-1: config 0 descriptor?? [ 161.395443][ T7457] loop4: detected capacity change from 0 to 2048 [ 161.446081][ T7457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.700252][ T5817] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 161.719988][ T5817] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x4 [ 161.745524][ T5817] cm6533_jd 0003:0D8C:0022.0006: item fetching failed at offset 4/5 [ 161.770723][ T5817] cm6533_jd 0003:0D8C:0022.0006: parse failed [ 161.798440][ T5817] cm6533_jd: probe of 0003:0D8C:0022.0006 failed with error -22 [ 161.933278][ T5817] usb 2-1: USB disconnect, device number 8 [ 162.379737][ T7464] loop4: detected capacity change from 0 to 32768 [ 162.428706][ T7464] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 162.773240][ T5901] ocfs2: Unmounting device (7,4) on (node local) [ 162.855283][ T7485] loop1: detected capacity change from 0 to 1024 [ 162.947470][ T7485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.017878][ T7485] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.277509][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.487'. [ 163.459844][ T3489] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:11: lblock 0 mapped to illegal pblock 0 (length 6) [ 163.577547][ T3489] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 163.626198][ T3489] EXT4-fs (loop1): This should not happen!! Data will be lost [ 163.626198][ T3489] [ 163.659028][ T3489] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 163.703060][ T5413] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.724094][ T3489] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 163.757784][ T3489] EXT4-fs (loop1): This should not happen!! Data will be lost [ 163.757784][ T3489] [ 163.792258][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 163.928645][ T5413] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 163.952926][ T5413] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 163.978864][ T5413] usb 1-1: config 220 has an invalid descriptor of length 104, skipping remainder of the config [ 164.008179][ T5413] usb 1-1: config 220 has no interface number 2 [ 164.029728][ T5413] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 164.068500][ T5413] usb 1-1: config 220 interface 0 has no altsetting 0 [ 164.089414][ T5413] usb 1-1: config 220 interface 76 has no altsetting 0 [ 164.106706][ T5413] usb 1-1: config 220 interface 1 has no altsetting 0 [ 164.142426][ T5413] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 164.173203][ T5413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.181267][ T5413] usb 1-1: Product: syz [ 164.215740][ T5413] usb 1-1: Manufacturer: syz [ 164.225267][ T5413] usb 1-1: SerialNumber: syz [ 164.452734][ C0] sched: RT throttling activated [ 164.541493][ T5413] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 164.583129][ T5413] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 164.617686][ T5413] usb 1-1: No valid video chain found. [ 164.656195][ T5413] usb 1-1: selecting invalid altsetting 0 [ 164.732101][ T5413] usb 1-1: selecting invalid altsetting 0 [ 164.751133][ T7500] loop4: detected capacity change from 0 to 131072 [ 164.777642][ T7500] F2FS-fs (loop4): invalid crc value [ 164.784239][ T5413] usbtest: probe of 1-1:220.1 failed with error -22 [ 164.809460][ T7500] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.813843][ T5413] usb 1-1: USB disconnect, device number 10 [ 164.902940][ T7500] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 165.799375][ T7541] loop0: detected capacity change from 0 to 256 [ 165.839922][ T7541] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 165.880035][ T7541] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 165.902938][ T5413] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 165.925198][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 165.925213][ T28] audit: type=1800 audit(1779543745.399:36): pid=7541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.509" name="file2" dev="loop0" ino=1048630 res=0 errno=0 [ 166.110077][ T5413] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.120007][ T5413] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.140588][ T5413] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.160729][ T5413] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 166.184142][ T5413] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 166.215177][ T5413] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.224413][ T5413] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.232438][ T5413] usb 2-1: Product: syz [ 166.236849][ T5413] usb 2-1: Manufacturer: syz [ 166.256591][ T5784] block nbd1: Receive control failed (result -32) [ 166.268330][ T5413] cdc_wdm 2-1:1.0: skipping garbage [ 166.273731][ T5413] cdc_wdm 2-1:1.0: skipping garbage [ 166.286510][ T5413] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 166.302683][ T5413] cdc_wdm 2-1:1.0: Unknown control protocol [ 166.403102][ T5853] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 166.451813][ T7547] loop0: detected capacity change from 0 to 1024 [ 166.502602][ T7547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 166.546527][ T7547] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.547258][ T27] usb 2-1: USB disconnect, device number 9 [ 166.636327][ T5853] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 166.644780][ T5853] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.655088][ T5853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.668905][ T5853] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.680570][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 166.692693][ T5853] usb 4-1: Product: syz [ 166.699064][ T5853] usb 4-1: Manufacturer: syz [ 166.708018][ T5853] usb 4-1: SerialNumber: syz [ 166.717462][ T5853] usb 4-1: config 0 descriptor?? [ 166.733930][ T5853] hub 4-1:0.0: bad descriptor, ignoring hub [ 166.750179][ T5853] hub: probe of 4-1:0.0 failed with error -5 [ 166.771096][ T5853] usb 4-1: selecting invalid altsetting 0 [ 166.815408][ T3437] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 166.835406][ T3437] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 166.862499][ T3437] EXT4-fs (loop0): This should not happen!! Data will be lost [ 166.862499][ T3437] [ 166.887179][ T3427] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 166.908682][ T3427] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 166.928903][ T3427] EXT4-fs (loop0): This should not happen!! Data will be lost [ 166.928903][ T3427] [ 166.991115][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.496439][ T7543] usb 4-1: reset high-speed USB device number 11 using dummy_hcd [ 167.626857][ T7571] loop1: detected capacity change from 0 to 4096 [ 167.667835][ T7572] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 167.702653][ T7543] usb 4-1: device firmware changed [ 167.719327][ T5853] usb 4-1: USB disconnect, device number 11 [ 167.728601][ T28] audit: type=1800 audit(1779543747.199:37): pid=7571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.521" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 167.826759][ T7571] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 167.848526][ T7571] Remounting filesystem read-only [ 167.873129][ T5820] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.911518][ T5774] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 167.922992][ T5853] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 167.937918][ T5774] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 167.946102][ T5774] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 167.956189][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 167.963659][ T5774] NILFS (loop1): discard dirty block: blocknr=27, size=4096 [ 167.971572][ T5774] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 167.980821][ T5774] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 167.988965][ T5774] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 167.997248][ T5774] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 168.005564][ T5774] NILFS (loop1): discard dirty page: offset=925696, ino=3 [ 168.012993][ T5774] NILFS (loop1): discard dirty block: blocknr=36, size=4096 [ 168.072917][ T5820] usb 1-1: Using ep0 maxpacket: 32 [ 168.080418][ T5820] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 168.092866][ T5820] usb 1-1: config 0 has no interface number 0 [ 168.102365][ T5820] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 168.113783][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.121857][ T5820] usb 1-1: Product: syz [ 168.143161][ T5820] usb 1-1: Manufacturer: syz [ 168.149838][ T5853] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 168.162815][ T5853] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 168.173166][ T5820] usb 1-1: SerialNumber: syz [ 168.186399][ T5820] usb 1-1: config 0 descriptor?? [ 168.203786][ T5853] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.217404][ T5853] usb 4-1: language id specifier not provided by device, defaulting to English [ 168.228291][ T5820] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 168.261267][ T5853] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 168.277130][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 168.286320][ T5853] usb 4-1: Product: syz [ 168.293953][ T5853] usb 4-1: config 0 descriptor?? [ 168.311864][ T5853] hub 4-1:0.0: bad descriptor, ignoring hub [ 168.318917][ T5853] hub: probe of 4-1:0.0 failed with error -5 [ 168.329738][ T5853] usb 4-1: selecting invalid altsetting 0 [ 168.453677][ T5820] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 168.482308][ T5820] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 168.733838][ T7581] program syz.1.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.836181][ T5820] usb 4-1: USB disconnect, device number 12 [ 168.907248][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 168.908304][ T5413] usb 1-1: USB disconnect, device number 11 [ 168.951647][ T5413] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 168.989109][ T5413] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 169.014055][ T5413] quatech2 1-1:0.51: device disconnected [ 169.222989][ T5820] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 169.254810][ T7584] loop4: detected capacity change from 0 to 32768 [ 169.326900][ T7584] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 169.361475][ T7584] gfs2: fsid=syz:syz: unknown hostdata (\) [ 169.444135][ T5820] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.472215][ T5820] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.501675][ T5820] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.521460][ T5820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.545572][ T5820] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.563377][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.581932][ T5820] usb 2-1: Product: syz [ 169.591796][ T5820] usb 2-1: Manufacturer: syz [ 169.615303][ T5820] cdc_wdm 2-1:1.0: skipping garbage [ 169.620587][ T5820] cdc_wdm 2-1:1.0: skipping garbage [ 169.641505][ T5820] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 169.650133][ T5820] cdc_wdm 2-1:1.0: Unknown control protocol [ 169.692860][ T5853] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.887367][ T5853] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 169.906788][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.926939][ T5853] usb 4-1: Product: syz [ 169.931167][ T5853] usb 4-1: Manufacturer: syz [ 169.945193][ T27] usb 2-1: USB disconnect, device number 10 [ 169.959081][ T5853] usb 4-1: SerialNumber: syz [ 169.998309][ T5853] usb 4-1: config 0 descriptor?? [ 170.019043][ T5853] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 170.337958][ T7602] Bluetooth: MGMT ver 1.22 [ 170.488714][ T7606] loop4: detected capacity change from 0 to 128 [ 170.534992][ T7606] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 170.596735][ T28] audit: type=1800 audit(1779543750.069:38): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.537" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048631 res=0 errno=0 [ 170.723944][ T7606] syz.4.537: attempt to access beyond end of device [ 170.723944][ T7606] loop4: rw=0, sector=125, nr_sectors = 8 limit=128 [ 170.823878][ T62] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 170.838212][ T62] kworker/u4:4: attempt to access beyond end of device [ 170.838212][ T62] loop4: rw=1, sector=133, nr_sectors = 24 limit=128 [ 170.901342][ T5853] gspca_sunplus: reg_w_riv err -71 [ 170.907678][ T5853] sunplus: probe of 4-1:0.0 failed with error -71 [ 170.954101][ T5853] usb 4-1: USB disconnect, device number 13 [ 171.024188][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 171.153769][ T5413] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 171.352843][ T5413] usb 1-1: Using ep0 maxpacket: 32 [ 171.382995][ T3379] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 171.394729][ T5413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.409282][ T5413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.420019][ T5413] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 171.429589][ T5413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.443942][ T5413] usb 1-1: config 0 descriptor?? [ 171.459493][ T5413] hub 1-1:0.0: USB hub found [ 171.583012][ T3379] usb 2-1: Using ep0 maxpacket: 8 [ 171.599199][ T3379] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 171.622896][ T3379] usb 2-1: config 0 has no interface number 0 [ 171.629062][ T3379] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.649943][ T3379] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 171.670448][ T3379] usb 2-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 171.690869][ T3379] usb 2-1: Product: syz [ 171.708041][ T5413] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 171.727959][ T3379] usb 2-1: config 0 descriptor?? [ 171.755254][ T3379] iowarrior 2-1:0.8: IOWarrior product=0x1512, serial= interface=8 now attached to iowarrior0 [ 171.926690][ T5413] usbhid 1-1:0.0: can't add hid device: -71 [ 171.953601][ T5413] usbhid: probe of 1-1:0.0 failed with error -71 [ 172.004699][ T5413] usb 1-1: USB disconnect, device number 12 [ 172.074943][ T3379] usb 2-1: USB disconnect, device number 11 [ 172.080956][ C0] iowarrior 2-1:0.8: iowarrior_callback - usb_submit_urb failed with result -19 [ 172.332559][ T7646] loop3: detected capacity change from 0 to 1024 [ 172.418954][ T28] audit: type=1800 audit(1779543751.889:39): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.555" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 172.601865][ T5413] kernel write not supported for file /sysvipc/sem (pid: 5413 comm: kworker/1:3) [ 172.615084][ T7642] loop4: detected capacity change from 0 to 32768 [ 172.709449][ T7642] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.908868][ T7642] XFS (loop4): Ending clean mount [ 173.076671][ T5901] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 173.865687][ T7698] loop0: detected capacity change from 0 to 128 [ 173.962856][ T3379] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.175573][ T3379] usb 5-1: Using ep0 maxpacket: 32 [ 174.197067][ T3379] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 174.229158][ T3379] usb 5-1: config 0 interface 0 has no altsetting 0 [ 174.243918][ T3379] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 174.273379][ T3379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.309188][ T3379] usb 5-1: config 0 descriptor?? [ 174.902879][ T5820] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.941618][ T3379] usbhid 5-1:0.0: can't add hid device: -71 [ 174.950814][ T3379] usbhid: probe of 5-1:0.0 failed with error -71 [ 174.967657][ T3379] usb 5-1: USB disconnect, device number 5 [ 175.113075][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 175.120819][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.134443][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.151320][ T5820] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 175.170324][ T5820] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 175.180842][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.201387][ T5820] usb 2-1: config 0 descriptor?? [ 175.645762][ T5820] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 175.670292][ T5820] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 175.682811][ T5820] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 175.700986][ T5820] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 175.721252][ T5820] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 175.741154][ T5820] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 175.760487][ T5820] microsoft 0003:045E:07DA.0007: item 0 4 0 11 parsing failed [ 175.777563][ T5820] microsoft 0003:045E:07DA.0007: parse failed [ 175.785323][ T5820] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 175.881957][ T3379] usb 2-1: USB disconnect, device number 12 [ 176.462950][ T5413] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 176.495253][ T7748] loop3: detected capacity change from 0 to 32768 [ 176.546933][ T7748] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.599448][ T7748] XFS (loop3): Ending clean mount [ 176.689253][ T5413] usb 1-1: config 4 has an invalid interface number: 244 but max is 2 [ 176.711898][ T5413] usb 1-1: config 4 has an invalid interface number: 244 but max is 2 [ 176.739306][ T5413] usb 1-1: config 4 has 2 interfaces, different from the descriptor's value: 3 [ 176.761889][ T5413] usb 1-1: config 4 has no interface number 1 [ 176.779315][ T5413] usb 1-1: config 4 interface 244 has no altsetting 0 [ 176.798575][ T5413] usb 1-1: config 4 interface 244 has no altsetting 1 [ 176.809367][ T5777] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 176.820072][ T5413] usb 1-1: config 4 interface 0 has no altsetting 0 [ 176.838266][ T5413] usb 1-1: string descriptor 0 read error: -22 [ 176.871780][ T5413] usb 1-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice=15.88 [ 176.893397][ T5413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.947839][ T5413] usb-storage 1-1:4.244: USB Mass Storage device detected [ 177.016704][ T5413] usb-storage 1-1:4.244: Quirks match for vid 054c pid 087d: 4000000 [ 177.066475][ T5413] usb-storage 1-1:4.0: USB Mass Storage device detected [ 177.100391][ T5413] usb-storage 1-1:4.0: Quirks match for vid 054c pid 087d: 4000000 [ 177.190323][ T5413] usb 1-1: USB disconnect, device number 13 [ 177.682978][ T5820] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 177.886133][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.910763][ T5820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.930084][ T5820] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 177.949533][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.961253][ T5820] usb 4-1: config 0 descriptor?? [ 178.401107][ T5820] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 178.452450][ T5820] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 178.473309][ T5820] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 178.484069][ T7811] loop4: detected capacity change from 0 to 512 [ 178.490429][ T5820] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 178.502823][ T5820] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 178.512510][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 178.522699][ T5820] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 178.531695][ T5820] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0 [ 178.557814][ T5820] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 178.611353][ T7811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.689426][ T7811] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.811878][ T5820] usb 4-1: USB disconnect, device number 14 [ 178.883996][ T7818] fido_id[7818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:1E7D:30D4.0008/report_descriptor': No such file or directory [ 178.951269][ T5901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.273986][ T7834] IPv6: NLM_F_CREATE should be specified when creating new route [ 179.529408][ T7842] Attempt to restore checkpoint with obsolete wellknown handles [ 179.723225][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 179.935267][ T27] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 179.963741][ T27] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.983349][ T27] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 180.002849][ T27] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.047013][ T27] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 180.075873][ T27] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 180.095564][ T27] usb 5-1: Product: syz [ 180.099791][ T27] usb 5-1: Manufacturer: syz [ 180.128168][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 180.148388][ T7858] program syz.3.639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.157692][ T27] cdc_wdm 5-1:1.0: skipping garbage [ 180.177387][ T27] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 180.192989][ T27] cdc_wdm 5-1:1.0: Unknown control protocol [ 180.397878][ T5820] usb 5-1: USB disconnect, device number 6 [ 180.592875][ T27] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 180.793107][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 180.810070][ T27] usb 2-1: config 0 has no interfaces? [ 180.821876][ T27] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 180.838837][ T27] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 180.864257][ T27] usb 2-1: Manufacturer: syz [ 180.878870][ T27] usb 2-1: config 0 descriptor?? [ 181.303869][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 181.407296][ T7877] loop4: detected capacity change from 0 to 512 [ 181.428390][ T5817] usb 2-1: USB disconnect, device number 13 [ 181.477209][ T7877] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #15: comm syz.4.648: inode has both inline data and extents flags [ 181.509479][ T7877] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.648: couldn't read orphan inode 15 (err -117) [ 181.576192][ T7877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000400000000 r/w without journal. Quota mode: writeback. [ 181.768058][ T7877] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 181.907067][ T5901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000400000000. [ 182.240658][ T7890] loop4: detected capacity change from 0 to 4096 [ 182.258665][ T7892] loop1: detected capacity change from 0 to 4096 [ 182.278386][ T7881] loop0: detected capacity change from 0 to 40427 [ 182.290810][ T7890] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 182.302654][ T7881] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 182.315035][ T7881] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 182.329615][ T7881] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 182.382289][ T7881] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.534871][ T7881] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 182.589078][ T7881] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.470539][ T7917] loop1: detected capacity change from 0 to 256 [ 183.508217][ T7917] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.549880][ T7917] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 183.601939][ T7917] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 184.227131][ T7950] loop1: detected capacity change from 0 to 512 [ 184.235055][ T7950] EXT4-fs: Ignoring removed i_version option [ 184.241108][ T7950] EXT4-fs: Ignoring removed bh option [ 184.322573][ T7950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.351292][ T7950] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.419565][ T7950] EXT4-fs (loop1): shut down requested (2) [ 184.522391][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.670932][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.674'. [ 184.691878][ T7964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 184.736916][ T7968] loop1: detected capacity change from 0 to 64 [ 184.837530][ T28] audit: type=1800 audit(1779543764.309:40): pid=7968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.675" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 185.152867][ T5817] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 185.342963][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 185.354841][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.381308][ T5817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.398075][ T5817] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.411953][ T5817] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 185.421540][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.435128][ T5817] usb 1-1: config 0 descriptor?? [ 185.877071][ T5817] microsoft 0003:045E:07DA.0009: unknown main item tag 0xd [ 185.905463][ T5817] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 185.925608][ T5817] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 185.942658][ T5817] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 185.962407][ T5817] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 185.982781][ T5817] microsoft 0003:045E:07DA.0009: no inputs found [ 185.999371][ T5817] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 186.136121][ T27] usb 1-1: USB disconnect, device number 14 [ 186.348747][ T7999] loop4: detected capacity change from 0 to 32768 [ 186.373959][ T7999] [ 186.373959][ T7999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.373959][ T7999] [ 186.402327][ T28] audit: type=1800 audit(1779543765.869:41): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.689" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 186.441733][ T7999] [ 186.441733][ T7999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.441733][ T7999] [ 186.458717][ T7999] [ 186.458717][ T7999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.458717][ T7999] [ 186.475181][ T7999] [ 186.475181][ T7999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.475181][ T7999] [ 186.486506][ T7999] [ 186.486506][ T7999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.486506][ T7999] [ 186.501960][ T111] ERROR: (device loop4): dbFree: error in block map [ 186.501960][ T111] [ 186.517994][ T7999] [ 186.517994][ T7999] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.517994][ T7999] [ 186.577488][ T5901] [ 186.577488][ T5901] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.577488][ T5901] [ 186.588614][ T5901] [ 186.588614][ T5901] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 186.588614][ T5901] [ 186.778671][ T8008] netlink: 508 bytes leftover after parsing attributes in process `syz.4.692'. [ 186.857505][ T8010] loop1: detected capacity change from 0 to 16 [ 186.963159][ T8010] erofs: (device loop1): mounted with root inode @ nid 36. [ 187.058121][ T8010] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 187.150304][ T8010] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 187.173250][ T8010] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 187.201402][ T8019] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 187.258530][ T8010] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 187.297542][ T8023] loop0: detected capacity change from 0 to 128 [ 187.313159][ T8019] erofs: (device loop1): z_erofs_fill_inode_lazy: big pcluster head1/2 of compact indexes should be consistent for nid 36 [ 187.328370][ T8023] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 187.367698][ T8019] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 187.403524][ T3427] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8) [ 187.411676][ T3427] FAT-fs (loop0): Filesystem has been set read-only [ 187.458097][ T3427] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522) [ 187.915551][ T8021] loop3: detected capacity change from 0 to 32768 [ 187.953217][ T8037] netlink: 56 bytes leftover after parsing attributes in process `syz.0.703'. [ 187.972872][ T5820] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.984964][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 188.087858][ T8021] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 188.152815][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 188.161309][ T5820] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 188.195197][ T5820] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 188.219613][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.245250][ T5820] usb 2-1: Product: syz [ 188.249485][ T5820] usb 2-1: Manufacturer: syz [ 188.254471][ T5820] usb 2-1: SerialNumber: syz [ 188.261787][ T5820] r8152-cfgselector 2-1: config 0 descriptor?? [ 188.311432][ T8046] loop4: detected capacity change from 0 to 128 [ 188.331431][ T8046] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.360408][ T8046] ext4 filesystem being mounted at /152/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.408782][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 188.441175][ T8046] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 188.493354][ T5901] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.547012][ T5820] r8152-cfgselector 2-1: Needed 2 retries to read version [ 188.780919][ T5820] r8152-cfgselector 2-1: Unknown version 0x0000 [ 188.798574][ T5820] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 189.021974][ T8053] loop3: detected capacity change from 0 to 32768 [ 189.071926][ T8053] read_mapping_page failed! [ 189.079082][ T8053] ERROR: (device loop3): txCommit: [ 189.079082][ T8053] [ 189.102459][ T8053] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 189.102459][ T8053] [ 189.251191][ T8055] loop3: detected capacity change from 0 to 256 [ 189.292891][ T8055] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 189.319093][ T8055] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 189.599792][ T8060] loop3: detected capacity change from 0 to 1024 [ 190.006461][ T8068] loop3: detected capacity change from 0 to 128 [ 190.044643][ T8068] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.214814][ T3518] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 190.273094][ T5086] Bluetooth: hci4: command 0xfc11 tx timeout [ 190.274313][ T5784] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 190.379106][ T8071] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 190.444254][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.453376][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.470598][ T8071] bridge0: entered allmulticast mode [ 190.549887][ T8075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.718'. [ 190.802398][ T8083] netlink: 16 bytes leftover after parsing attributes in process `syz.1.722'. [ 190.893292][ T8087] loop0: detected capacity change from 0 to 128 [ 191.396049][ T8095] loop0: detected capacity change from 0 to 4096 [ 191.803098][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 192.005871][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.021325][ T5817] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 192.032549][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.053887][ T5817] usb 2-1: config 0 descriptor?? [ 192.165774][ T8122] loop3: detected capacity change from 0 to 1024 [ 192.328707][ T8122] EXT4-fs: Ignoring removed i_version option [ 192.343209][ T8122] EXT4-fs: inline encryption not supported [ 192.359079][ T8122] EXT4-fs (loop3): Test dummy encryption mode enabled [ 192.389876][ T8122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.506841][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.661168][ T8135] loop3: detected capacity change from 0 to 512 [ 192.670860][ T8135] EXT4-fs (loop3): unsupported inode size: 4096 [ 192.677806][ T8135] EXT4-fs (loop3): blocksize: 1024 [ 192.685471][ T5817] ath6kl: mismatched byte count 0 vs. expected 12 [ 192.700245][ T5817] ath6kl: Failed to init ath6kl core: -22 [ 192.742050][ T5817] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 192.910241][ T8142] loop3: detected capacity change from 0 to 256 [ 192.938296][ T8142] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.944412][ T5820] usb 2-1: USB disconnect, device number 15 [ 192.955440][ T8142] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 193.003010][ T8142] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d) [ 193.218520][ T8146] loop0: detected capacity change from 0 to 256 [ 193.666447][ T8157] netlink: 'syz.0.752': attribute type 30 has an invalid length. [ 193.841266][ T8163] loop0: detected capacity change from 0 to 512 [ 193.902899][ T8163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.952529][ T8163] EXT4-fs (loop0): 1 truncate cleaned up [ 193.978741][ T8163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.012924][ T8163] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 194.033002][ T8163] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 194.061024][ T8169] netlink: 72 bytes leftover after parsing attributes in process `syz.1.757'. [ 194.201605][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.279443][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.422564][ T8177] loop0: detected capacity change from 0 to 128 [ 194.452976][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 194.469859][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'. [ 194.500278][ T8177] FAT-fs (loop0): Directory bread(block 524322) failed [ 194.523422][ T8177] FAT-fs (loop0): Directory bread(block 524323) failed [ 194.530642][ T8177] FAT-fs (loop0): Directory bread(block 524324) failed [ 194.544093][ T8177] FAT-fs (loop0): Directory bread(block 524325) failed [ 194.573850][ T8177] FAT-fs (loop0): Directory bread(block 524326) failed [ 194.580802][ T8177] FAT-fs (loop0): Directory bread(block 524327) failed [ 194.597769][ T8177] FAT-fs (loop0): Directory bread(block 524328) failed [ 194.605857][ T8177] FAT-fs (loop0): Directory bread(block 524329) failed [ 194.654767][ T8177] FAT-fs (loop0): Directory bread(block 524322) failed [ 194.678144][ T8180] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 194.678377][ T8177] FAT-fs (loop0): Directory bread(block 524323) failed [ 194.695125][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.709241][ T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.740429][ T27] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 194.749703][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.783815][ T27] usb 5-1: config 0 descriptor?? [ 195.264372][ T27] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 195.264438][ T27] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 195.264464][ T27] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 195.264489][ T27] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 195.264514][ T27] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 195.264539][ T27] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 195.264565][ T27] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 195.276559][ T27] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 195.463518][ T27] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 195.664263][ T27] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 195.723808][ T27] cp2112: probe of 0003:10C4:EA90.000A failed with error -71 [ 195.763591][ T27] usb 5-1: USB disconnect, device number 7 [ 195.888675][ T8192] loop3: detected capacity change from 0 to 32768 [ 196.141789][ T8209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.772'. [ 196.653842][ T8207] loop1: detected capacity change from 0 to 32768 [ 196.683013][ T3379] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 196.691077][ T8207] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 196.704666][ T8207] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 196.817645][ T8207] XFS (loop1): Ending clean mount [ 196.823025][ T5853] kernel read not supported for file /dsp (pid: 5853 comm: kworker/0:6) [ 196.862118][ T8207] XFS (loop1): Quotacheck needed: Please wait. [ 196.913612][ T3379] usb 5-1: Using ep0 maxpacket: 32 [ 196.925855][ T3379] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 196.941062][ T3379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.989256][ T3379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.006274][ T3379] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 197.020191][ T3379] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.032314][ T8207] XFS (loop1): Quotacheck: Done. [ 197.038609][ T3379] usb 5-1: config 0 descriptor?? [ 197.275501][ T5774] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 197.510625][ T3379] logitech 0003:046D:C29C.000B: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 197.787232][ T8240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 197.892513][ T3379] logitech 0003:046D:C29C.000B: no inputs found [ 197.923291][ T3379] usb 5-1: USB disconnect, device number 8 [ 198.569602][ T8265] loop0: detected capacity change from 0 to 4096 [ 199.162877][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 199.366314][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 199.382828][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 199.392531][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.418299][ T3379] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 199.431238][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 199.440688][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 199.449195][ T9] usb 1-1: Product: syz [ 199.453489][ T9] usb 1-1: Manufacturer: syz [ 199.458129][ T9] usb 1-1: SerialNumber: syz [ 199.622882][ T3379] usb 2-1: Using ep0 maxpacket: 32 [ 199.637722][ T3379] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 199.647628][ T3379] usb 2-1: config 0 has no interface number 0 [ 199.647716][ T3379] usb 2-1: config 0 interface 184 has no altsetting 0 [ 199.654707][ T3379] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 199.686436][ T3379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.697208][ T9] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 199.708296][ T3379] usb 2-1: Product: syz [ 199.713711][ T3379] usb 2-1: Manufacturer: syz [ 199.732894][ T3379] usb 2-1: SerialNumber: syz [ 199.749142][ T3379] usb 2-1: config 0 descriptor?? [ 199.773874][ T3379] smsc75xx v1.0.0 [ 199.924213][ T9] usb 1-1: USB disconnect, device number 15 [ 199.945184][ T9] usblp0: removed [ 200.343150][ T8299] loop4: detected capacity change from 0 to 512 [ 200.599650][ T3379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 200.627355][ T3379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 200.647222][ T8303] netlink: 68 bytes leftover after parsing attributes in process `syz.4.810'. [ 200.666673][ T3379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 200.671025][ T8304] loop0: detected capacity change from 0 to 512 [ 200.690463][ T3379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 200.723142][ T3379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 200.745108][ T3379] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 200.769197][ T3379] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 200.781473][ T3379] usb 2-1: USB disconnect, device number 16 [ 200.839311][ T8304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.049196][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.219319][ T8313] loop0: detected capacity change from 0 to 512 [ 201.289011][ T8313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.324129][ T8313] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.587202][ T8324] netlink: 11 bytes leftover after parsing attributes in process `syz.1.818'. [ 201.597515][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 201.606523][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 201.661548][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.985611][ T8332] loop1: detected capacity change from 0 to 256 [ 202.020689][ T8332] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 202.037888][ T8332] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.068443][ T8309] loop4: detected capacity change from 0 to 40427 [ 202.122536][ T8309] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 202.143935][ T8309] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 202.208379][ T8309] F2FS-fs (loop4): invalid crc value [ 202.272848][ T8309] F2FS-fs (loop4): Found nat_bits in checkpoint [ 202.490665][ T8309] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 202.510279][ T8309] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 202.762803][ T28] audit: type=1800 audit(1779543782.229:42): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.812" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 203.417336][ T8351] loop1: detected capacity change from 0 to 32768 [ 203.506652][ T8351] syz.1.828: attempt to access beyond end of device [ 203.506652][ T8351] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 203.562021][ T8371] loop3: detected capacity change from 0 to 1024 [ 203.567380][ T8351] metapage_write_end_io: I/O error [ 203.581950][ T8351] ERROR: (device loop1): diWrite: ixpxd invalid [ 203.581950][ T8351] [ 203.606826][ T8371] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 203.648356][ T8351] ERROR: (device loop1): remounting filesystem as read-only [ 203.665258][ T8371] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 2: comm syz.3.839: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.684140][ T8351] ERROR: (device loop1): txCommit: [ 203.684140][ T8351] [ 203.728363][ T8371] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 203.764203][ T8351] blkno = 8ed2c, nblocks = 1 [ 203.794760][ T8371] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 48: comm syz.3.839: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.818009][ T8351] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 203.818009][ T8351] [ 203.847155][ T8376] loop4: detected capacity change from 0 to 64 [ 203.867412][ T8371] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 203.876755][ T8376] hfs: unable to locate alternate MDB [ 203.883282][ T8376] hfs: continuing without an alternate MDB [ 203.894889][ T8371] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.839: Failed to acquire dquot type 0 [ 203.926570][ T8371] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 203.974019][ T8371] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.839: mark_inode_dirty error [ 204.012566][ T8371] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 204.062944][ T8371] EXT4-fs (loop3): 1 orphan inode deleted [ 204.070153][ T8371] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.088574][ T12] EXT4-fs error (device loop3): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 204.123674][ T112] blkno = 8ed23, nblocks = 1 [ 204.134414][ T12] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 204.141847][ T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 204.141847][ T112] [ 204.185977][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 0 [ 204.206359][ T112] blkno = 8ed2c, nblocks = 4 [ 204.211022][ T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 204.211022][ T112] [ 204.263080][ T5774] syz-executor: attempt to access beyond end of device [ 204.263080][ T5774] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 204.310954][ T5774] metapage_write_end_io: I/O error [ 204.331548][ T5774] JFS: metapage_get_blocks failed [ 204.337043][ T5774] JFS: metapage_get_blocks failed [ 204.342116][ T5774] JFS: metapage_get_blocks failed [ 204.350538][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.353190][ T5774] JFS: metapage_get_blocks failed [ 204.367948][ T5774] JFS: metapage_get_blocks failed [ 204.385385][ T5777] EXT4-fs error (device loop3): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 204.399111][ T5777] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 204.410600][ T5777] EXT4-fs error (device loop3): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 204.511966][ T8387] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.608198][ T8390] netlink: 64 bytes leftover after parsing attributes in process `syz.0.847'. [ 204.783449][ T8395] loop0: detected capacity change from 0 to 256 [ 204.838490][ T8395] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 205.424291][ T8405] loop0: detected capacity change from 0 to 4096 [ 205.463425][ T8405] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 205.666035][ T8405] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 206.006682][ T8422] loop0: detected capacity change from 0 to 256 [ 206.295960][ T8431] loop1: detected capacity change from 0 to 128 [ 206.327451][ T8431] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 206.414614][ T8436] loop3: detected capacity change from 0 to 128 [ 206.437103][ T8431] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 206.558147][ T8431] fscrypt (loop1, inode 12): Unsupported encryption flags (0x3d) [ 206.682639][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.305087][ T8461] loop3: detected capacity change from 0 to 128 [ 207.361155][ T8461] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.384387][ T8461] ext4 filesystem being mounted at /238/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.647596][ T5777] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.936755][ T8470] loop1: detected capacity change from 0 to 4096 [ 207.976193][ T8470] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 208.025926][ T8476] loop0: detected capacity change from 0 to 512 [ 208.101400][ T8476] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.190041][ T8476] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.410746][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.065790][ T8482] loop3: detected capacity change from 0 to 32768 [ 210.098860][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.123053][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.150697][ T8514] loop4: detected capacity change from 0 to 64 [ 210.151432][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.206899][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.222934][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.259773][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.280571][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.336661][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.346345][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.366002][ T8514] UBIFS error (pid: 8514): cannot open "c:::", error -22 [ 210.367964][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.402811][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.410268][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.420397][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.428067][ T27] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 210.436352][ T786] hid-generic 0000:0004:261D.000C: unknown main item tag 0x0 [ 210.501393][ T786] hid-generic 0000:0004:261D.000C: hidraw0: HID v0.03 Device [syz1] on syz0 [ 210.656564][ T8520] loop0: detected capacity change from 0 to 64 [ 210.669167][ T27] usb 4-1: config 0 has no interfaces? [ 210.689001][ T27] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1 [ 210.705091][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.725293][ T27] usb 4-1: Product: syz [ 210.729515][ T27] usb 4-1: Manufacturer: syz [ 210.745639][ T27] usb 4-1: SerialNumber: syz [ 210.818221][ T27] usb 4-1: config 0 descriptor?? [ 211.068788][ T3379] usb 4-1: USB disconnect, device number 15 [ 211.213152][ T8525] loop4: detected capacity change from 0 to 2048 [ 211.268883][ T8529] loop1: detected capacity change from 0 to 128 [ 211.351158][ T8525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.363594][ T8525] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.450663][ T8533] syz.1.907: attempt to access beyond end of device [ 211.450663][ T8533] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 211.512846][ T27] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 211.548869][ T5901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.609152][ T12] kworker/u4:1: attempt to access beyond end of device [ 211.609152][ T12] loop1: rw=1, sector=153, nr_sectors = 888 limit=128 [ 211.714445][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.736421][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.781699][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 211.822123][ T27] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 211.844535][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.872243][ T27] usb 1-1: config 0 descriptor?? [ 212.316889][ T27] steelseries 0003:1038:1410.000D: item fetching failed at offset 5/7 [ 212.353590][ T27] steelseries 0003:1038:1410.000D: parse failed [ 212.375745][ T27] steelseries: probe of 0003:1038:1410.000D failed with error -22 [ 212.575488][ T27] usb 1-1: USB disconnect, device number 16 [ 212.928199][ T8548] loop1: detected capacity change from 0 to 40427 [ 212.958261][ T8548] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 212.979866][ T8548] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 213.011235][ T8548] F2FS-fs (loop1): invalid crc value [ 213.025986][ T8548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 213.148431][ T8548] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 213.168012][ T8548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 213.272983][ T3379] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.311273][ T8560] loop0: detected capacity change from 0 to 128 [ 213.317874][ T28] audit: type=1800 audit(1779543792.789:43): pid=8548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.914" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 213.350509][ T8560] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.365942][ T8560] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 213.489118][ T3379] usb 4-1: config 0 has an invalid interface number: 5 but max is 0 [ 213.509477][ T3379] usb 4-1: config 0 has no interface number 0 [ 213.527579][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.542508][ T3379] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 213.588934][ T3379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.619636][ T3379] usb 4-1: config 0 descriptor?? [ 213.632600][ T3379] ums-realtek 4-1:0.5: USB Mass Storage device detected [ 213.897682][ T786] usb 4-1: USB disconnect, device number 16 [ 214.377765][ T8577] loop1: detected capacity change from 0 to 128 [ 214.405348][ T8577] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 214.458804][ T8577] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 214.471402][ T8577] FAT-fs (loop1): Filesystem has been set read-only [ 214.480597][ T8577] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 214.804965][ T8573] loop0: detected capacity change from 0 to 32768 [ 214.830139][ T8573] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 215.017166][ T5792] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 215.162556][ T8590] loop1: detected capacity change from 0 to 4096 [ 215.197003][ T8590] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 215.307691][ T8590] ntfs: volume version 3.1. [ 215.362816][ T8590] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 215.412819][ T8590] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 215.462765][ T8590] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 215.594961][ T8590] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 215.660252][ T8590] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 216.290951][ T8609] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 216.358077][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.403444][ T8609] bridge_slave_1: left allmulticast mode [ 216.409168][ T8609] bridge_slave_1: left promiscuous mode [ 216.433234][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.860208][ T8592] loop4: detected capacity change from 0 to 32768 [ 216.949093][ T8592] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 217.107313][ T8607] loop1: detected capacity change from 0 to 40427 [ 217.126911][ T8607] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 217.195252][ T8607] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0xe4 [ 217.251687][ T8607] F2FS-fs (loop1): invalid crc value [ 217.304017][ T8607] F2FS-fs (loop1): Found nat_bits in checkpoint [ 217.366036][ T8633] loop3: detected capacity change from 0 to 512 [ 217.434326][ T8592] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 217.468067][ T8607] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 217.498949][ T8633] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.945: invalid indirect mapped block 256 (level 2) [ 217.593289][ T8633] EXT4-fs (loop3): 2 truncates cleaned up [ 217.600501][ T8633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.652592][ T8607] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.703591][ T8592] XFS (loop4): Starting recovery (logdev: internal) [ 217.713050][ T8635] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 217.755946][ T8607] F2FS-fs (loop1): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 217.839534][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.884277][ T8592] XFS (loop4): Ending recovery (logdev: internal) [ 217.954195][ T786] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 218.042511][ T8592] XFS (loop4): User initiated shutdown received. [ 218.043301][ T8640] input: syz0 as /devices/virtual/input/input13 [ 218.051325][ T8592] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 218.069661][ T8592] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 218.168623][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 218.182198][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 218.203192][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 218.236013][ T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 218.270398][ T786] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 218.283174][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.291313][ T786] usb 1-1: Product: syz [ 218.295864][ T786] usb 1-1: Manufacturer: syz [ 218.300501][ T786] usb 1-1: SerialNumber: syz [ 218.305699][ T5901] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.330353][ T786] usb 1-1: config 0 descriptor?? [ 218.563995][ T8645] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5777] was attempted by ""[8645] [ 218.600260][ T786] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 218.763208][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.952'. [ 218.851294][ T5853] usb 1-1: USB disconnect, device number 17 [ 219.062541][ T8649] loop1: detected capacity change from 0 to 1024 [ 219.104762][ T8649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.267457][ T8649] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 623: comm syz.1.948: Attempting to read directory block (623) that is past i_size (638464) [ 219.466262][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.482195][ T8658] loop4: detected capacity change from 0 to 64 [ 219.540224][ T28] audit: type=1800 audit(1779543799.009:44): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.953" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 219.806368][ T8669] loop3: detected capacity change from 0 to 256 [ 219.820211][ T8669] exfat: Deprecated parameter 'namecase' [ 219.845541][ T8669] exfat: Deprecated parameter 'namecase' [ 219.868284][ T5784] block nbd2: Receive control failed (result -32) [ 219.880966][ T8669] exFAT-fs (loop3): failed to load upcase table (idx : 0x00000c00, chksum : 0x54b6a122, utbl_chksum : 0xe619d30d) [ 219.923141][ T5853] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 220.143366][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 220.182293][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 220.210004][ T5853] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 220.231865][ T8677] loop3: detected capacity change from 0 to 64 [ 220.239236][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.258509][ T5853] usb 2-1: config 0 descriptor?? [ 220.487786][ T5853] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 220.591762][ T8667] loop4: detected capacity change from 0 to 32768 [ 220.628827][ T8667] JBD2: Ignoring recovery information on journal [ 220.664664][ T8667] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 220.802504][ T8689] loop3: detected capacity change from 0 to 256 [ 220.919047][ T5901] ocfs2: Unmounting device (7,4) on (node local) [ 220.927439][ T5853] usb 2-1: USB disconnect, device number 17 [ 221.078412][ T8691] loop3: detected capacity change from 0 to 256 [ 222.172663][ T8695] loop4: detected capacity change from 0 to 40427 [ 222.202518][ T8695] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 222.231095][ T8695] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 222.271652][ T8695] F2FS-fs (loop4): Found nat_bits in checkpoint [ 222.371021][ T8695] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 222.393868][ T8695] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 222.546844][ T28] audit: type=1800 audit(1779543802.019:45): pid=8695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.967" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 222.567194][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.682111][ T5901] syz-executor: attempt to access beyond end of device [ 222.682111][ T5901] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 222.742001][ T5901] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 222.763470][ T5853] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 223.005019][ T5853] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.026229][ T5853] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.048398][ T5853] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 223.062858][ T5853] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 223.081474][ T5853] usb 2-1: Product: syz [ 223.089891][ T5853] usb 2-1: Manufacturer: syz [ 223.125144][ T5853] hub 2-1:4.0: USB hub found [ 223.334246][ T5853] hub 2-1:4.0: 2 ports detected [ 223.824291][ T8741] loop3: detected capacity change from 0 to 32768 [ 223.893284][ T8741] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 223.947339][ T5853] usb 2-1: USB disconnect, device number 18 [ 224.010209][ T8757] loop0: detected capacity change from 0 to 128 [ 224.142110][ T8741] XFS (loop3): Ending clean mount [ 224.187069][ T8760] syz.0.992: attempt to access beyond end of device [ 224.187069][ T8760] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 224.202285][ T8741] XFS (loop3): Quotacheck needed: Please wait. [ 224.278569][ T8741] XFS (loop3): Quotacheck: Done. [ 224.488162][ T3455] kworker/u4:9: attempt to access beyond end of device [ 224.488162][ T3455] loop0: rw=1, sector=153, nr_sectors = 888 limit=128 [ 224.545640][ T5777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.219165][ T8782] loop4: detected capacity change from 0 to 512 [ 225.276854][ T8782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.337122][ T8782] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 225.365327][ T8782] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 225.428454][ T5901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.533977][ T8788] loop4: detected capacity change from 0 to 128 [ 225.600753][ T8769] loop0: detected capacity change from 0 to 40427 [ 225.623815][ T8769] F2FS-fs (loop0): invalid crc value [ 225.639184][ T8790] syz.4.1004: attempt to access beyond end of device [ 225.639184][ T8790] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 225.658460][ T8769] F2FS-fs (loop0): Found nat_bits in checkpoint [ 225.727807][ T8769] F2FS-fs (loop0): Start checkpoint disabled! [ 225.767212][ T8769] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 225.858848][ T49] kworker/u4:3: attempt to access beyond end of device [ 225.858848][ T49] loop4: rw=1, sector=153, nr_sectors = 888 limit=128 [ 226.074363][ T3455] kworker/u4:9: attempt to access beyond end of device [ 226.074363][ T3455] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 226.093592][ T8793] loop4: detected capacity change from 0 to 512 [ 226.107559][ T3455] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 226.144311][ T3455] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 226.151478][ T3455] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 226.171082][ T8793] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 226.221107][ T8793] EXT4-fs (loop4): 1 truncate cleaned up [ 226.237003][ T8793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.326102][ T28] audit: type=1800 audit(1779543805.799:46): pid=8793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1005" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 226.462806][ T5853] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 226.600237][ T5901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.610022][ T8799] loop0: detected capacity change from 0 to 128 [ 226.646904][ T8799] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.669545][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 226.684216][ T8799] ext4 filesystem being mounted at /261/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.704820][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.718111][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.729250][ T5853] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 226.742022][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.755158][ T5853] usb 2-1: config 0 descriptor?? [ 227.011660][ T8795] loop1: detected capacity change from 0 to 2048 [ 227.033833][ T8795] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.097620][ T8795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.393627][ T5853] cherry 0003:046A:0027.000E: unknown main item tag 0x2 [ 227.402136][ T5853] cherry 0003:046A:0027.000E: unknown main item tag 0x1 [ 227.409732][ T5853] cherry 0003:046A:0027.000E: unknown main item tag 0x1 [ 227.432346][ T5853] cherry 0003:046A:0027.000E: unknown main item tag 0x4 [ 227.439844][ T5853] cherry 0003:046A:0027.000E: bogus close delimiter [ 227.446806][ T5853] cherry 0003:046A:0027.000E: item 0 0 2 10 parsing failed [ 227.456546][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.459652][ T5853] cherry: probe of 0003:046A:0027.000E failed with error -22 [ 227.602902][ T5817] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 227.621796][ T786] usb 2-1: USB disconnect, device number 19 [ 227.812156][ T5817] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.822390][ T5817] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 227.834362][ T5817] usb 5-1: config 1 has no interface number 0 [ 227.843886][ T5817] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 227.855277][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.863395][ T5817] usb 5-1: Product: syz [ 227.867594][ T5817] usb 5-1: Manufacturer: syz [ 227.872242][ T5817] usb 5-1: SerialNumber: syz [ 228.099072][ T5817] usb 5-1: 2:0 : does not exist [ 228.104151][ T5817] usb 5-1: 2:1 : does not exist [ 228.109071][ T5817] usb 5-1: 2:3 : does not exist [ 228.122658][ T5817] usb 5-1: 2:4 : does not exist [ 228.128219][ T5817] usb 5-1: 2:5 : does not exist [ 228.134313][ T5817] usb 5-1: 2:6 : does not exist [ 228.139231][ T5817] usb 5-1: 2:7 : does not exist [ 228.144687][ T5817] usb 5-1: 2:8 : does not exist [ 228.149597][ T5817] usb 5-1: 2:9 : does not exist [ 228.172884][ T5817] usb 5-1: BAAD HEADSET c_chmask mismatch [ 228.199485][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.247035][ T5817] snd-usb-audio: probe of 5-1:1.2 failed with error -22 [ 228.258209][ T5817] usb 5-1: USB disconnect, device number 9 [ 228.332544][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.679348][ T8850] loop0: detected capacity change from 0 to 32768 [ 230.012785][ T5853] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 230.082097][ T8852] loop4: detected capacity change from 0 to 40427 [ 230.107999][ T8852] F2FS-fs (loop4): build fault injection attr: rate: 14, type: 0x7ffff [ 230.157142][ T8852] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0xe4 [ 230.190458][ T8852] F2FS-fs (loop4): invalid crc value [ 230.219529][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.251788][ T5853] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.277600][ T8852] F2FS-fs (loop4): Found nat_bits in checkpoint [ 230.302785][ T5853] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 230.342460][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.375871][ T5853] usb 4-1: config 0 descriptor?? [ 230.393753][ T8852] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 230.476471][ T8852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.614418][ T8852] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 230.814766][ T5853] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 230.838273][ T5853] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 230.862900][ T5853] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 230.872769][ T5853] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 230.892404][ T5853] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 230.915397][ T5853] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 231.004132][ T5853] playstation 0003:054C:0DF2.000F: Invalid byte count transferred, expected 20 got 0 [ 231.037345][ T5853] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense pairing info: -22 [ 231.062856][ T5853] playstation 0003:054C:0DF2.000F: Failed to get MAC address from DualSense [ 231.091779][ T5853] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 231.137832][ T5853] playstation: probe of 0003:054C:0DF2.000F failed with error -22 [ 231.230277][ T5853] usb 4-1: USB disconnect, device number 17 [ 231.609638][ T8881] loop0: detected capacity change from 0 to 64 [ 231.638261][ T8883] netlink: 'syz.1.1042': attribute type 12 has an invalid length. [ 231.664940][ T8883] netlink: 'syz.1.1042': attribute type 2 has an invalid length. [ 231.686573][ T28] audit: type=1800 audit(1779543811.159:47): pid=8881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1041" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 231.711572][ T8883] netlink: 460 bytes leftover after parsing attributes in process `syz.1.1042'. [ 231.941635][ T8890] mmap: syz.1.1044 (8890): VmData 43626496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 232.464992][ T8887] loop4: detected capacity change from 0 to 32768 [ 233.458752][ T8921] loop3: detected capacity change from 0 to 128 [ 233.575281][ T8924] syz.3.1058: attempt to access beyond end of device [ 233.575281][ T8924] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 233.677152][ T3518] kworker/u4:12: attempt to access beyond end of device [ 233.677152][ T3518] loop3: rw=1, sector=153, nr_sectors = 888 limit=128 [ 233.773420][ T786] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 233.966391][ T786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.986926][ T786] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.007904][ T786] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.023057][ T5853] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 234.029186][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.062790][ T786] usb 2-1: SerialNumber: syz [ 234.233149][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 234.243966][ T5853] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 234.252229][ T5853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.269777][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.282918][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.305950][ T5853] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.328567][ T786] usb 2-1: 0:2 : does not exist [ 234.343894][ T5853] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 234.369456][ T8943] loop4: detected capacity change from 0 to 8 [ 234.381808][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.408820][ T786] usb 2-1: USB disconnect, device number 20 [ 234.577028][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.644784][ T5853] usb 1-1: GET_CAPABILITIES returned 0 [ 234.650356][ T5853] usbtmc 1-1:16.0: can't read capabilities [ 234.739188][ T8947] mmap: syz.4.1078 (8947) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 234.860843][ T8953] loop4: detected capacity change from 0 to 64 [ 234.879903][ T786] usb 1-1: USB disconnect, device number 18 [ 235.054622][ T5901] hfs: node 4:3 still has 1 user(s)! [ 235.718680][ T8957] loop1: detected capacity change from 0 to 32768 [ 235.796450][ T8957] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 235.828859][ T8957] JBD2: Ignoring recovery information on journal [ 235.871301][ T8957] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 236.520157][ T8979] loop4: detected capacity change from 0 to 16 [ 236.560556][ T8979] erofs: (device loop4): mounted with root inode @ nid 36. [ 236.606586][ T8979] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 236.651508][ T8979] erofs: (device loop4): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 236.707277][ T8982] erofs: (device loop4): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 237.510821][ T9006] loop3: detected capacity change from 0 to 512 [ 237.545092][ T9006] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.1097: inode has both inline data and extents flags [ 237.583890][ T9006] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1097: couldn't read orphan inode 15 (err -117) [ 237.628065][ T9006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.880558][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.907291][ T9015] ªªªªªª: renamed from vlan0 (while UP) [ 238.666375][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 238.839074][ T9026] loop4: detected capacity change from 0 to 32768 [ 238.865078][ T9026] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 238.881887][ T9026] JBD2: Ignoring recovery information on journal [ 238.936096][ T9026] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 239.927724][ T5413] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 240.122780][ T5413] usb 1-1: Using ep0 maxpacket: 16 [ 240.135280][ T5413] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.156099][ T5413] usb 1-1: config 0 interface 0 has no altsetting 0 [ 240.169579][ T5413] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 240.189683][ T5413] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.212159][ T5413] usb 1-1: config 0 descriptor?? [ 240.672350][ T5413] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 240.726844][ T9058] loop3: detected capacity change from 0 to 32768 [ 240.878050][ T9058] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.035618][ T9058] XFS (loop3): Ending clean mount [ 241.077789][ T9058] XFS (loop3): Quotacheck needed: Please wait. [ 241.165087][ T5901] ocfs2: Unmounting device (7,4) on (node local) [ 241.178196][ T5413] usb 1-1: USB disconnect, device number 19 [ 241.185475][ T9058] XFS (loop3): Quotacheck: Done. [ 241.635917][ T5777] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.849165][ T9084] loop0: detected capacity change from 0 to 8 [ 241.905895][ T9084] SQUASHFS error: Unable to read directory block [249:c] [ 242.139130][ T9086] loop1: detected capacity change from 0 to 4096 [ 242.202456][ T9091] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.900025][ T9089] loop0: detected capacity change from 0 to 32768 [ 242.963311][ T9089] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 243.043136][ T9089] JBD2: Ignoring recovery information on journal [ 243.218760][ T9089] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 243.733808][ T9095] loop1: detected capacity change from 0 to 131072 [ 243.741940][ T9095] F2FS-fs (loop1): Segment count (31) mismatch with total segments from devices (0) [ 243.751444][ T9095] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 243.780710][ T9095] F2FS-fs (loop1): invalid crc value [ 243.845372][ T9095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 243.900529][ T9095] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 243.900546][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 243.916734][ T9095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 244.536252][ T9105] loop4: detected capacity change from 0 to 32768 [ 244.622435][ T9105] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.733289][ T9105] XFS (loop4): Ending clean mount [ 244.746942][ T9105] XFS (loop4): Quotacheck needed: Please wait. [ 244.863541][ T9105] XFS (loop4): Quotacheck: Done. [ 244.937432][ T9136] loop1: detected capacity change from 0 to 24 [ 244.996615][ T9136] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 245.059956][ T9136] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 245.416393][ T5901] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 245.873065][ T5853] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 246.127937][ T5853] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 246.156033][ T5853] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 246.168606][ T9154] program syz.4.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.211047][ T5853] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 246.244890][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.270882][ T5853] usb 2-1: Product: syz [ 246.280026][ T5853] usb 2-1: Manufacturer: syz [ 246.285231][ T5853] usb 2-1: SerialNumber: syz [ 246.292422][ T5853] usb 2-1: config 0 descriptor?? [ 246.305646][ T9149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.320859][ T9149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.558300][ T9149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.578233][ T9149] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.733059][ T5776] ocfs2: Unmounting device (7,0) on (node local) [ 246.802937][ T5817] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 247.002769][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 247.024146][ T5817] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 247.041042][ T5817] usb 5-1: config 0 has no interface number 0 [ 247.060766][ T5817] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.082750][ T5817] usb 5-1: config 0 interface 85 has no altsetting 0 [ 247.116915][ T5817] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 247.136583][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.173086][ T5817] usb 5-1: Product: syz [ 247.182423][ T5817] usb 5-1: Manufacturer: syz [ 247.198006][ T5817] usb 5-1: SerialNumber: syz [ 247.204488][ T5853] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 247.227337][ T5817] usb 5-1: config 0 descriptor?? [ 247.244504][ T5853] usb 2-1: USB disconnect, device number 21 [ 247.863241][ T9177] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.873023][ T9177] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.882420][ T9177] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.891425][ T9177] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.902437][ T5817] appletouch 5-1:0.85: Geyser mode initialized. [ 247.926506][ T5817] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input16 [ 247.937686][ T9177] vxlan0: entered promiscuous mode [ 247.972327][ T9177] vxlan0: entered allmulticast mode [ 248.180274][ T5817] usb 5-1: USB disconnect, device number 10 [ 248.286524][ T5817] appletouch 5-1:0.85: input: appletouch disconnected [ 250.715806][ T9233] tipc: Started in network mode [ 250.769137][ T9233] tipc: Node identity ac14140f, cluster identity 4711 [ 250.798721][ T9233] tipc: New replicast peer: 255.255.255.255 [ 250.825357][ T9233] tipc: Enabled bearer , priority 10 [ 250.852908][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1179'. [ 250.872204][ T9236] tipc: Disabling bearer [ 251.096509][ T9245] loop1: detected capacity change from 0 to 256 [ 251.345997][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1184'. [ 251.391911][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1184'. [ 251.602430][ T9258] loop1: detected capacity change from 0 to 256 [ 251.652833][ T5817] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 251.697187][ T9258] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 251.857136][ T5817] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.886106][ T5817] usb 5-1: config 0 interface 0 has no altsetting 0 [ 251.904103][ T5817] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.932803][ T5817] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.951799][ T5817] usb 5-1: Product: syz [ 251.966419][ T5817] usb 5-1: Manufacturer: syz [ 251.986029][ T5817] usb 5-1: SerialNumber: syz [ 252.006034][ T5817] usb 5-1: config 0 descriptor?? [ 252.043451][ T5817] usb 5-1: selecting invalid altsetting 0 [ 252.058180][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'. [ 252.089025][ T9264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1191'. [ 252.285545][ T5838] usb 5-1: USB disconnect, device number 11 [ 252.402909][ T9268] program syz.3.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 252.956657][ T9284] loop3: detected capacity change from 0 to 512 [ 253.095013][ T9284] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 253.138086][ T9284] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 253.184257][ T9284] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #13: comm syz.3.1199: iget: bad i_size value: 12154757448730 [ 253.273241][ T9284] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.1199: couldn't read orphan inode 13 (err -117) [ 253.322252][ T9284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.385878][ T786] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 253.480341][ T9284] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 253.586480][ T786] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 253.602824][ T786] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 253.625102][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.633018][ T786] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 253.663036][ T786] usb 5-1: config 220 has no interface number 2 [ 253.679840][ T786] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 253.714214][ T786] usb 5-1: config 220 interface 0 has no altsetting 0 [ 253.721062][ T786] usb 5-1: config 220 interface 76 has no altsetting 0 [ 253.767837][ T786] usb 5-1: config 220 interface 1 has no altsetting 0 [ 253.787397][ T786] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 253.797651][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.812814][ T786] usb 5-1: Product: syz [ 253.823327][ T786] usb 5-1: Manufacturer: syz [ 253.832796][ T786] usb 5-1: SerialNumber: syz [ 253.953727][ T9286] loop1: detected capacity change from 0 to 32768 [ 254.078908][ T786] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 254.104550][ T786] usb 5-1: No valid video chain found. [ 254.110146][ T786] usb 5-1: selecting invalid altsetting 0 [ 254.166508][ T786] usb 5-1: selecting invalid altsetting 0 [ 254.172343][ T786] usbtest: probe of 5-1:220.1 failed with error -22 [ 254.211894][ T786] usb 5-1: USB disconnect, device number 12 [ 255.093681][ T786] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 255.285066][ T786] usb 5-1: Using ep0 maxpacket: 16 [ 255.296746][ T786] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.307232][ T5817] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 255.324117][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 255.351112][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.371399][ T786] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 255.391651][ T786] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.414192][ T786] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 255.429667][ T786] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 255.447262][ T786] usb 5-1: Manufacturer: syz [ 255.457237][ T786] usb 5-1: config 0 descriptor?? [ 255.524447][ T5817] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.542858][ T5817] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 255.560000][ T5817] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 255.569401][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.589539][ T5817] usb 2-1: Product: syz [ 255.593942][ T5817] usb 2-1: Manufacturer: syz [ 255.602927][ T5817] usb 2-1: SerialNumber: syz [ 255.718527][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.853293][ T786] rc_core: IR keymap rc-hauppauge not found [ 255.859312][ T786] Registered IR keymap rc-empty [ 255.889740][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.903102][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 255.921300][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.943194][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 255.974029][ T786] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 256.013141][ T786] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 256.031986][ T5817] usb 2-1: cannot find UAC_HEADER [ 256.043999][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.076574][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.118410][ T5817] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 256.152970][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.207850][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.252471][ T5778] udevd[5778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.274829][ T5817] usb 2-1: USB disconnect, device number 22 [ 256.292933][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.327222][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.383181][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.390957][ T9325] ªªªªªª: renamed from vlan0 (while UP) [ 256.423013][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.472908][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.503472][ T786] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.535253][ T786] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 256.555284][ T786] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 256.584423][ T786] usb 5-1: USB disconnect, device number 13 [ 256.806508][ T9333] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 257.684539][ T9360] loop3: detected capacity change from 0 to 4096 [ 257.728505][ T9361] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.842444][ T9360] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 258.190998][ T9373] loop0: detected capacity change from 0 to 128 [ 258.271142][ T9373] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.308721][ T9373] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.524621][ T5776] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.663028][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'. [ 259.088148][ T28] audit: type=1326 audit(1779543838.559:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.163151][ T28] audit: type=1326 audit(1779543838.589:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.236875][ T28] audit: type=1326 audit(1779543838.589:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.272511][ T9383] loop4: detected capacity change from 0 to 32768 [ 259.318786][ T9383] JBD2: Ignoring recovery information on journal [ 259.343608][ T28] audit: type=1326 audit(1779543838.589:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.492918][ T28] audit: type=1326 audit(1779543838.589:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.520282][ T9383] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 259.531880][ T9404] batman_adv: batadv0: Adding interface: macsec1 [ 259.538643][ T28] audit: type=1326 audit(1779543838.589:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.592625][ T9404] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.629911][ T28] audit: type=1326 audit(1779543838.589:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.662826][ T9404] batman_adv: batadv0: Interface activated: macsec1 [ 259.689971][ T28] audit: type=1326 audit(1779543838.589:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.721911][ T9407] loop3: detected capacity change from 0 to 512 [ 259.750063][ T9407] EXT4-fs: inline encryption not supported [ 259.772899][ T28] audit: type=1326 audit(1779543838.589:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.830126][ T9407] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 259.884454][ T5901] ocfs2: Unmounting device (7,4) on (node local) [ 259.894937][ T28] audit: type=1326 audit(1779543838.589:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.3.1248" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52b19ce59 code=0x7ffc0000 [ 259.898014][ T9407] EXT4-fs (loop3): 1 truncate cleaned up [ 259.926319][ T9407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.062876][ T9412] loop0: detected capacity change from 0 to 128 [ 260.201251][ T9416] loop4: detected capacity change from 0 to 128 [ 260.259040][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.285676][ T9416] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.309578][ T9418] loop1: detected capacity change from 0 to 64 [ 260.348367][ T9416] ext4 filesystem being mounted at /269/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 260.417269][ T9418] syz.1.1257: attempt to access beyond end of device [ 260.417269][ T9418] loop1: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 260.494280][ T9418] Buffer I/O error on dev loop1, logical block 134217734, lost async page write [ 260.700800][ T5901] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 261.065529][ T9438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1265'. [ 261.479263][ T9451] loop3: detected capacity change from 0 to 4096 [ 261.538629][ T9454] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.668030][ T9456] loop4: detected capacity change from 0 to 4096 [ 261.679938][ T9456] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 261.689397][ T9456] EXT4-fs (loop4): Test dummy encryption mode enabled [ 261.740485][ T9456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.890147][ T9456] EXT4-fs (loop4): shut down requested (0) [ 262.069137][ T9464] loop0: detected capacity change from 0 to 128 [ 262.178682][ T9464] syz.0.1277: attempt to access beyond end of device [ 262.178682][ T9464] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 262.207578][ T5901] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.503963][ T9475] netlink: 'syz.1.1281': attribute type 1 has an invalid length. [ 262.566070][ T9475] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1281'. [ 262.791688][ T9481] loop0: detected capacity change from 0 to 8192 [ 262.825490][ T9481] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 262.875272][ T9481] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 262.894993][ T9481] REISERFS (device loop0): using ordered data mode [ 262.901577][ T9481] reiserfs: using flush barriers [ 262.910021][ T9481] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 262.927615][ T9481] REISERFS (device loop0): checking transaction log (loop0) [ 263.013539][ T5853] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 263.094901][ T9481] REISERFS (device loop0): Using tea hash to sort names [ 263.112870][ T9481] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 263.217258][ T9472] loop4: detected capacity change from 0 to 32768 [ 263.233095][ T5853] usb 2-1: Using ep0 maxpacket: 8 [ 263.241381][ T5853] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.251452][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.253548][ T5838] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 263.267179][ T5853] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.295535][ T9472] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.305487][ T5853] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.356768][ T5853] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.387649][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.403673][ T9472] XFS (loop4): Ending clean mount [ 263.419106][ T9472] XFS (loop4): Quotacheck needed: Please wait. [ 263.499941][ T5838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.526983][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.530675][ T9472] XFS (loop4): Quotacheck: Done. [ 263.535297][ T5838] usb 4-1: Product: syz [ 263.535316][ T5838] usb 4-1: Manufacturer: syz [ 263.535332][ T5838] usb 4-1: SerialNumber: syz [ 263.631334][ T5901] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 263.680981][ T5853] usb 2-1: GET_CAPABILITIES returned 0 [ 263.706341][ T5853] usbtmc 2-1:16.0: can't read capabilities [ 263.938974][ T9] usb 2-1: USB disconnect, device number 23 [ 264.424596][ T5838] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 264.455607][ T5838] cdc_ncm 4-1:1.0: bind() failure [ 264.473809][ T5838] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 264.488426][ T5838] cdc_ncm 4-1:1.1: bind() failure [ 264.505308][ T5838] usb 4-1: USB disconnect, device number 18 [ 264.958362][ T9525] netlink: 'syz.0.1299': attribute type 2 has an invalid length. [ 265.266746][ T9532] loop3: detected capacity change from 0 to 16 [ 265.323569][ T9532] erofs: (device loop3): mounted with root inode @ nid 36. [ 265.404391][ T9532] erofs: (device loop3): erofs_find_target_block: corrupted dir block 8200 @ nid 36 [ 265.695937][ T9544] loop3: detected capacity change from 0 to 128 [ 265.998974][ T9548] loop1: detected capacity change from 0 to 4096 [ 266.058823][ T9551] loop0: detected capacity change from 0 to 1024 [ 266.119843][ T9551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 266.218485][ T9551] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.372889][ T9556] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 266.440042][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 266.665687][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1313'. [ 267.378615][ T9587] loop4: detected capacity change from 0 to 128 [ 267.448173][ T5792] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.537547][ T9590] loop7: detected capacity change from 0 to 7 [ 267.562938][ T9590] Dev loop7: unable to read RDB block 7 [ 267.568619][ T9590] loop7: unable to read partition table [ 267.593155][ T9590] loop7: partition table beyond EOD, truncated [ 267.637326][ T9590] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 267.653623][ T9591] loop0: detected capacity change from 0 to 512 [ 267.673620][ T9591] EXT4-fs: Ignoring removed mblk_io_submit option [ 267.725578][ T9591] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1326: invalid indirect mapped block 10 (level 1) [ 267.782804][ T9591] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1326: invalid indirect mapped block 8 (level 1) [ 267.869960][ T9591] EXT4-fs (loop0): 1 truncate cleaned up [ 267.909102][ T9591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.984805][ T9602] loop4: detected capacity change from 0 to 256 [ 268.055376][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.222198][ T9605] loop3: detected capacity change from 0 to 2048 [ 268.284387][ T9605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.443998][ T9605] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 268.595429][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.691534][ T9621] loop1: detected capacity change from 0 to 1024 [ 268.729817][ T9621] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.843443][ T9621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 268.910535][ T9621] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.929598][ T9621] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 1: comm syz.1.1336: lblock 1 mapped to illegal pblock 1 (length 1) [ 269.037530][ T9632] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm syz.1.1336: lblock 0 mapped to illegal pblock 0 (length 1) [ 269.104136][ T9632] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 269.132559][ T9636] xt_CT: You must specify a L4 protocol and not use inversions on it [ 269.182509][ T9632] EXT4-fs (loop1): This should not happen!! Data will be lost [ 269.182509][ T9632] [ 269.360781][ T3489] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 4: comm kworker/u4:11: lblock 4 mapped to illegal pblock 4 (length 2) [ 269.403261][ T3489] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 269.404734][ T9644] loop0: detected capacity change from 0 to 64 [ 269.438675][ T3489] EXT4-fs (loop1): This should not happen!! Data will be lost [ 269.438675][ T3489] [ 269.476801][ T3489] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:11: bg 0: block 112: padding at end of block bitmap is not set [ 269.513462][ T9644] syz.0.1345: attempt to access beyond end of device [ 269.513462][ T9644] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 269.531007][ T3489] BUG: unable to handle page fault for address: ffffffffffffffec [ 269.538784][ T3489] #PF: supervisor read access in kernel mode [ 269.544790][ T3489] #PF: error_code(0x0000) - not-present page [ 269.550817][ T3489] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 269.556888][ T3489] Oops: 0000 [#1] PREEMPT SMP KASAN [ 269.562142][ T3489] CPU: 0 PID: 3489 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 269.569812][ T3489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.577389][ T9644] Buffer I/O error on dev loop0, logical block 134217734, lost async page write [ 269.579897][ T3489] Workqueue: writeback wb_workfn (flush-7:1) [ 269.594997][ T3489] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 269.601123][ T3489] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 37 d6 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 269.620782][ T3489] RSP: 0018:ffffc9000cdf6a40 EFLAGS: 00010246 [ 269.626909][ T3489] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: ffff88802e4bda00 [ 269.634938][ T3489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffec [ 269.642948][ T3489] RBP: ffffc9000cdf6cf0 R08: ffffffff911c959f R09: 1ffffffff22392b3 [ 269.650984][ T3489] R10: dffffc0000000000 R11: fffffbfff22392b4 R12: 0000000000000001 [ 269.659004][ T3489] R13: 1ffff920019bed74 R14: dffffc0000000000 R15: ffffffffffffffe4 [ 269.667025][ T3489] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 269.676016][ T3489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 269.682652][ T3489] CR2: ffffffffffffffec CR3: 0000000021300000 CR4: 00000000003506f0 [ 269.690673][ T3489] Call Trace: [ 269.693999][ T3489] [ 269.696984][ T3489] ? __might_sleep+0xe0/0xe0 [ 269.701618][ T3489] ? ext4_ext_release+0x10/0x10 [ 269.706532][ T3489] ? __lock_acquire+0x7d40/0x7d40 [ 269.711605][ T3489] ? ext4_es_lookup_extent+0x60e/0xa00 [ 269.717107][ T3489] ext4_map_blocks+0x9e2/0x1b80 [ 269.722016][ T3489] ? ext4_issue_zeroout+0x250/0x250 [ 269.727293][ T3489] ? rcu_is_watching+0x15/0xb0 [ 269.732106][ T3489] ext4_do_writepages+0x1461/0x3990 [ 269.737378][ T3489] ? mark_lock+0x94/0x320 [ 269.741765][ T3489] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 269.748683][ T3489] ? rcu_read_lock_any_held+0xb4/0x140 [ 269.754213][ T3489] ? __lock_acquire+0x1347/0x7d40 [ 269.759285][ T3489] ext4_writepages+0x1dd/0x350 [ 269.764102][ T3489] ? ext4_read_folio+0x2f0/0x2f0 [ 269.769102][ T3489] ? reacquire_held_locks+0x30e/0x5b0 [ 269.774523][ T3489] ? writeback_sb_inodes+0x362/0xf50 [ 269.779866][ T3489] ? ext4_read_folio+0x2f0/0x2f0 [ 269.784858][ T3489] do_writepages+0x3b3/0x630 [ 269.789511][ T3489] ? folio_clear_dirty_for_io+0xc30/0xc30 [ 269.795282][ T3489] ? writeback_sb_inodes+0x4b0/0xf50 [ 269.800619][ T3489] ? __lock_acquire+0x7d40/0x7d40 [ 269.805681][ T3489] ? do_raw_spin_lock+0x11f/0x2c0 [ 269.810778][ T3489] __writeback_single_inode+0x153/0xec0 [ 269.816396][ T3489] writeback_sb_inodes+0x7cd/0xf50 [ 269.821568][ T3489] ? move_expired_inodes+0x321/0x730 [ 269.826944][ T3489] ? queue_io+0x550/0x550 [ 269.831332][ T3489] ? rcu_is_watching+0x15/0xb0 [ 269.836166][ T3489] wb_writeback+0x46a/0xbf0 [ 269.840733][ T3489] ? queue_io+0x341/0x550 [ 269.845109][ T3489] ? percpu_ref_tryget+0x250/0x250 [ 269.850273][ T3489] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 269.856311][ T3489] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.861561][ T3489] wb_workfn+0x400/0xe60 [ 269.865863][ T3489] ? inode_wait_for_writeback+0x230/0x230 [ 269.871636][ T3489] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 269.877669][ T3489] ? read_lock_is_recursive+0x20/0x20 [ 269.883089][ T3489] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.888329][ T3489] ? process_scheduled_works+0x96f/0x15d0 [ 269.894094][ T3489] ? process_scheduled_works+0x96f/0x15d0 [ 269.899857][ T3489] process_scheduled_works+0xa5d/0x15d0 [ 269.905477][ T3489] ? worker_attach_to_pool+0x380/0x380 [ 269.910993][ T3489] ? assign_work+0x3d2/0x5d0 [ 269.915645][ T3489] worker_thread+0xa55/0xfc0 [ 269.920293][ T3489] kthread+0x2fa/0x390 [ 269.924403][ T3489] ? pr_cont_work+0x560/0x560 [ 269.929126][ T3489] ? kthread_blkcg+0xd0/0xd0 [ 269.933760][ T3489] ret_from_fork+0x48/0x80 [ 269.938219][ T3489] ? kthread_blkcg+0xd0/0xd0 [ 269.942852][ T3489] ret_from_fork_asm+0x11/0x20 [ 269.947680][ T3489] [ 269.950735][ T3489] Modules linked in: [ 269.954699][ T3489] CR2: ffffffffffffffec [ 269.958893][ T3489] ---[ end trace 0000000000000000 ]--- [ 269.964377][ T3489] RIP: 0010:ext4_ext_map_blocks+0x2d11/0x6800 [ 269.970508][ T3489] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 37 d6 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 08 4d 89 fc 49 8d [ 269.990168][ T3489] RSP: 0018:ffffc9000cdf6a40 EFLAGS: 00010246 [ 269.996368][ T3489] RAX: 0000000000000000 RBX: ffffffffffffffe4 RCX: ffff88802e4bda00 [ 270.004378][ T3489] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffec [ 270.012400][ T3489] RBP: ffffc9000cdf6cf0 R08: ffffffff911c959f R09: 1ffffffff22392b3 [ 270.020423][ T3489] R10: dffffc0000000000 R11: fffffbfff22392b4 R12: 0000000000000001 [ 270.028450][ T3489] R13: 1ffff920019bed74 R14: dffffc0000000000 R15: ffffffffffffffe4 [ 270.036469][ T3489] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 270.045444][ T3489] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.052072][ T3489] CR2: ffffffffffffffec CR3: 0000000021300000 CR4: 00000000003506f0 [ 270.060088][ T3489] Kernel panic - not syncing: Fatal exception [ 270.066332][ T3489] Kernel Offset: disabled [ 270.070665][ T3489] Rebooting in 86400 seconds..